CVE-2022-1204 : A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 prot

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

Published 2022-08-29 15:15:11

Updated 2022-09-02 19:41:57

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2022-1204

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions before (<) 5.17
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.17 Update RC1
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.17 Update RC2
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-1204

EPSS FAQ

0.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 3 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-1204

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-1204

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Assigned by:
- nvd@nist.gov (Primary)
- secalert@redhat.com (Secondary)

References for CVE-2022-1204

https://bugzilla.redhat.com/show_bug.cgi?id=2071051

2071051 – (CVE-2022-1204) CVE-2022-1204 kernel: Use after free in net/ax25/af_ax25.c
Issue Tracking;Patch;Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/2

oss-security - CVE-2022-1204: Linux kernel: UAF caused by binding operation when ax25 device is detaching
Exploit;Mailing List;Patch;Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-1204

CVE-2022-1204- Red Hat Customer Portal
Issue Tracking;Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2022-1204

CVE-2022-1204
Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-1204

Products affected by CVE-2022-1204

Exploit prediction scoring system (EPSS) score for CVE-2022-1204

CVSS scores for CVE-2022-1204

CWE ids for CVE-2022-1204

References for CVE-2022-1204